Site in Lockdown

What It Means

This request was blocked because the site was in lockdown when the request arrived. “Site in Lockdown” appears as the block reason on the block page and in your WAF logs.

Why It Matters

Most block codes describe something wrong with the request itself, such as an attack payload or a blocked IP address. This one describes the state of the site at the time of the request, so it can affect ordinary visitors as well as attackers.

Common Triggers

This block code is rare. If you see it and did not expect access to your site to be restricted, contact support so we can check your WAF’s configuration.

What To Do

1. Find the blocked requests in your WAF logs and note the timestamps, IP addresses, and URL paths.
2. Check whether the blocks cover a specific time window or are still happening.
3. Contact us at support@expeditedsecurity.com with a few example log entries or the incident ID from the block page, and we’ll find out why the site was in lockdown and restore normal access.

See Understanding Block Codes for the full list of block codes.